Changelog

The network category grows: Private Endpoint DNS Zones (pick your Azure services, get every privatelink zone they need), a DMARC Record Generator, a dig & nslookup Output Explainer, an Azure DNS Delegation Checker and a plain DNS Record Lookup.

The delegation checker and record lookup are the site's second and third server-assisted tools: browsers can't speak DNS, so the name you enter is resolved by our server via Cloudflare's public resolver. Both pages disclose exactly what is sent (the name and record type, nothing more — never stored). Everything else, as always, runs entirely in your browser.

There's also a new printable cheat sheet: Private endpoint DNS zones, the companion reference to the zone-picker tool.

And the DMARC/SPF/DKIM Analyzer learned to fetch records by domain — type a domain (plus a selector for DKIM) instead of pasting. The fetch uses the same disclosed server-side lookup; pasting still keeps everything local.

First public release, with sixteen browser-based tools across certificates & PKI, network & auth, Entra & Graph, cost, and data utilities — plus the error-code reference database (60+ codes), a 46-term glossary, five printable cheat sheets and ten in-depth guides.

Everything runs client-side in your browser: no accounts, no cookies, no consent banners. The single exception is the SCEP Endpoint Tester, which uses a small server-side probe (clearly disclosed on the tool page).